Access policy decision by client IP?

I have an access policy which uses oauth to direct a client to external authentication. I'd like to add a step before this which will allow clients with private IP addresses to bypass auth. Is there ...